Zlmediakit

zlmediakit

Vendor: Zlmediakit • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-35203 1Zlmediakit 1Zlmediakit Jul 24, 2026 Apr 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient dat...Show more ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RTP packet with a 1-byte payload (0xFF, all flags set) causes the parser to read past the end of the allocated buffer, resulting in a heap-buffer-overflow. This vulnerability is fixed with commit 435dcbcbbf700fd63b2ca9eac6cef3b5ea75169d.Show less
CVE-2023-39067 1Zlmediakit 1Zlmediakit Jun 17, 2026 Sep 11, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL.
CVE-2023-31861 1Zlmediakit 1Zlmediakit Jun 17, 2026 May 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ZLMediaKit 4.0 is vulnerable to Directory Traversal.
CVE-2022-37237 1Zlmediakit 1Zlmediakit Jun 17, 2026 Aug 30, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327.